Veronte Autopilot DRx

Veronte Autopilot DRx is the version of Veronte Autopilot with distributed redundancy. Specifically designed to comply with eVTOL certification requirements, the Distributed Redundant Autopilot developed by Embention is the only “Ready to Fly” eVTOL autopilot on the market.

Developed in compliance with aviation standards DO178C / ED-12, DO254, and DO160, the system is “Safety Independent” thanks to its Dual Management Board, which prevents any single-point failure from a degrading operation.


Independent Arbiter


Configurable Voting Logic


Distributed Redundancy


Robust to Zonal Failure


No Single Point of Failure


Distributed Redundancy

Independent redundant hardware

Robust Design

Robust to zonal failures

eVTOL Certification

Compliance with eVTOL certification

Distributed Redundancy

Distributed Redundancy

The distributed redundancy in Veronte Autopilot DRx features independent redundant hardware on 3 levels. This architecture makes it robust to zonal failures, avoiding the fault propagation and single points of failure, meeting the most demanding requirements for eVTOL certification.

The first level comprises three independent Autopilot units executing the flight control. These communicate with two Management Boards that manage the voting algorithms. On the third level are the Isolators that identify faults in peripherals connected to the bus and isolate them from the rest of the ecosystem. All this is interconnected by redundant communication buses.


Fail Operational

Fail Operational

Thanks to the redundancy of both the independent autopilots and the Management Board, the new Veronte Autopilot DRx has been designed without a single point of failure (No Single Point of Failure) providing redundancy and independence for maximum safety.

In addition, two redundant communication buses are used for the interaction between the devices. Incorporating multiple microcontrollers in charge of real-time bus supervision, which in case of an anomaly will isolate the device avoiding the propagation of the failure. This architecture makes the system robust to failures, allowing it to continue the mission safely.

Redundant Communication

Two redundant buses

High Reliability

No single point of failure

Real-time supervision

Multiple microcontrollers are included


Safety Independent

Double Management Board

Architecture Reliability

Automated fault detection and isolation

Maximum safety

Each component integrates a "Built-in test"

Failure Isolation

Failure Isolation

The Veronte Autopilot DRx architecture has automated fault detection and isolation at two levels. Each component integrates a "Built-in Test" to auto-detect the fault and communicate with the arbiter for disconnection.

In addition, both the Management Board and the Bus Isolator have mechanisms to detect failures in the bus or in the rest of the peripherals (i.e. babbling idiot failure) and isolate them from the rest of the network in a safe way.


Designed for eVTOL

Comply with the most demanding eVTOL requirements

Robust Design

Robust to single and zonal points of failure

Advanced Control Modes

Such as Autonomous Control or Fly-by-wire

Designed for eVTOL

Designed for eVTOL

Designed specifically for eVTOL, Veronte Autopilot DRx offers maximum safety and independence. It is also really flexible in terms of functionality with tools to adapt it perfectly to the requirements of any eVTOL configuration (multirotor, tilting wings, tilting rotors, gyrocopter, STOL...) without the need for custom development and without losing compliance with DO178C.

In addition, it can be configured to include fully customized control modes, such as a fully autonomous control mode or fly-by-wire (arcade) mode. Robust to single and zonal points of failure and compatible with peripheral redundancy, it is specially designed for eVTOL certification in systems with DAL-A requirements.


Design Reliability

DO178C / ED-12 and DO254 DAL-B compliance

Environmental Test

Test according to DO160G

Certification Documents

Design, testing and manufacturing reliability evidences


eVTOL certification requires compliance with the most stringent aeronautical standards. Therefore, the Veronte Autopilot DRx is developed according to DO178C, DO254 and DO160G in order to reach the most demanding levels of certification, DAL-A. Thanks to Model Based Design technology, the system allows customization of the autopilot without affecting compliance with design standards.

Embention makes available to eVTOL manufacturers a certification data package that includes all the documentation needed to demonstrate the reliability of the autopilot in an eVTOL certification process.

EnclosureAnodized aluminium | IP67 Waterproof | EMI Shielding
Weight 750g (Including 3x radio module)
MountingM4 screws
Temperature range (No convection)-40 to 65ºC
Pressure port diameter2.4mm
RF connectors SSMA jack female | 1x LOS Radio / 2x GNSS / 1x 4G)


Advanced Vehicle Control
eVTOL operationsFully autonomous | Fly-by-wire | Remote control
Critical systemsMALE, HALE & tactical | Populated areas | Critical facilities
Any vehicle layoutAircraft: Fixed-wing, VTOL, multicopter, autogiro, helicopter, parafoil, or hybrid | USV (Surface Vehicles ) | UGV (Ground Vehicles)  | Other
Control surfacesAileron, flap, elevator, rudder, gas, v-tail, x-tail, elevon, flaperon, ruddervator, cyclic, collective, throttle, custom servo mixing… |  Up to 32 actuators | Custom servo mixing
EngineElectric, combustion or turbine | Multiple engine support
Control modesAutonomous  | Manual  | Assisted manual  | Fly-By-Camera  |  Custom
AutomationsCustom automatic routines | Actions (go home, go to, output trigger…) | Events (variable range, WP reach, Control phase…)
ProgramsCustom control algorithms | Configurable execution flow
Control blocksPID |  Energy control |  Gain scheduling |  Autotuning | Stall protection
Control phasesCustomizable | Takeoff, landing, cruise, hold, autorotation, gliding, taxi, tumble, sea skimming…
GNSS deniedInertial navigation |  Sensors + wind estimation
Custom messagesCAN bus | Serial |  User defined protocols
Embedded DEMWorldwide Digital Elevation Model (DEM) onboard
Mission computerVeronte VCP | Onboard telemetry and telecommand | Inflight mission edit | NVIDIA, Linux or Windows
Control station softwareVeronte Pipe included | Support for custom CS software integration
Simulation environmentHIL (Hardware In the Loop) | SIL (Software In the Loop) |  Custom integrations


Safety & Reliability
No SPOFNo single point of failure | Robust to arbiter failure
3x RedundancyEmbedded triple redundancy
4x RedundancyExternal autopilot core | Main controller or fail-operational unit
Redundant power inputUp to 4 independent inputs
FTS (Flight Termination System)Dissimilar microprocessors & regulation stages | Automatic or manual activation 
Internal redundancyRedundant communication bus | Kill me function on each core
Custom voting logicsConfigurable voting logics and strategies 
Reliability documentsDDP: Declaration of Design & Performance

ATR: Acceptance Test Results

COC: Certificate Of Compliance

Manufacturing processStrict Acceptance Test Procedure (ATP) |  Conformal coat
ESS (Environment Stress Screening)Temperature and vibration circles for early failure detection
DO160 & MIL-STD-810 Environmental testTemperature, temperature variation, altitude, shock, vibration
DO178C Software reliabilityDAL-B
DO254 Hardware reliabilityDAL-B
Certification supportDedicated engineering support
Software testing24/7 testing environment | Custom test for specific PDIs | Iron bird setup
MTBF4×10^7 MTBF | Project-based MTBCF calculation
Configurable failsafeCustom events and actions | Multiple safety levels
WarningsVisual & sound alarms | Customizable
User access levelUnlimited users | Custom permissions


RedundancyRedundant sensors on each autopilot core
9x Barometer3x 0 to 103 kPa | 3x 1 to 120kPa | 3x 30 to 110 kPa
3x Pitot3x 0.003kPa (5kt 8km/h sea level) to 6.9kPa (206kt 382km/h sea level) | Up to 1570kt 2900km/h with optional external sensor
6x Accelerometers (3 axes)6x ±16G | 3x ±24G | Sustained manoeuvre (peaks up to ±32g)
6x Gyroscopes (3 axes)9x 125 to 2000 deg/sec (compensated)
6x Magnetometers (3 axes)6x  16 gauss | 3x  8 gauss
6x GPSGPS, BeiDou, GLONASS | RTK | GNSS-based Attitude
4x Voltage4x Input voltage sensor
3x Temperature3x Internal temperature sensor
External sensorsEnhanced compatibility | Navigation fusion


I / O (Critical Ports)
Vin4x (6.5-36V)
Power17 / 29 (without data link / 3G data)
PWM / GPIOUp to 16 (multiplexed)
RS2321x (multiplexed)
RS4851x (multiplexed)
VOut5 & 3.3V (multiplexed)
CAN Bus2x (redundant)
ADC5x (0-3V) (independent)
EQUEP (Encuadrature encoder)1x (multiplexed)
I2C1x (multiplexed)
UART1x (multiplexed)
USB3x (one per module)
I/O ExtendersVeronte CAN expander | Redundant CAN bus communications
  • Multiplexed: Arbiter controls which module signal is in the I/O
  • Redundant: Communications bus
  • Independent: All modules receive the same signal


I / O (Auxiliary Ports – Arbiter Microprocessor)
Vin1x (6.5-36V) DC
ADC10x (0-36V)
ARINC1x Tx / 1x Rx


I / O (Auxiliary Ports – External FCU Interface)
CAN Bus2x
ADC (Output)4x
FTS (Input)1x Watchdog


Data Link
LOS Datalink3x Embedded datalink | Custom combinations
LOS Datalink options410-480MHz | 902-928MHz | 2400-2483MHz | None
BLOS Datalink3x Embedded datalink | 4G | eSIM or nano-SIM
External modulesRS232 connection | SATCOM | 4G | LOS
OtherExternal radio module via RS232, Satcom, 4G
Tracking antennaVeronte Tracker or third party


GeofencingHard & soft |  No go areas
Sense & avoidLidar, radar, ADS-B 
Selectable unitsSelectable units or custom unit creation
WorkspaceDrag & drop telemetry displays (LCD, text, gauge, LED…) | Configurable colors & sizes
Map viewMap sources (Google Maps, Bing Maps, Open Maps…) | Custom map layers
Multiple platformsSimultaneous platform control from the same control station
Multiple control stationsMultiple control stations available for controlling or monitoring
RouteIntuitive user interface for waypoint & route creation | Inflight mission edit
PayloadCamera gimbal, tracking antenna, transponder, camera shooter, GNSS receiver…
Post-flightPost-flight analysis tool | CSV data export
Safety pitotManual control at any time during the operation  Joystick connection on ground or onboard
ExportNo export restrictions, ITAR free | Advanced functionalities may require an export permit. Please contact our team for further details

Veronte Autopilot DRx

Veronte Autopilot 4x - w/o DAA v1.8


Veronte Autopilot 4x - ADS-B v1.8


Veronte Autopilot 4x - Remote ID v1.8



Contact Us


I accept the LOPD*